Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2989C36DF3C11ED8AECBF5CC4F9AE02.roa
File:                     A2989C36DF3C11ED8AECBF5CC4F9AE02.roa (raw, json)
Hash identifier:          z/MNMSC+RFEADOPGSHJUHiZvRcGlvzymTCkxiB7Pcfs=
Subject key identifier:   A9:23:09:04:23:E6:72:02:E6:1F:51:00:4A:31:16:07:C7:7D:2F:94
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F47B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2989C36DF3C11ED8AECBF5CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:25:37 +0000
ROA not before:           Mon 06 Jul 2026 17:25:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147287
IP address blocks:        103.174.130.0/23 maxlen: 24
                          2001:df2:85c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 12:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62587 (0xf47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:25:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be511-aae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:ca:86:af:2e:50:cc:08:6b:1c:0b:92:ba:
                    ed:09:e1:31:e1:3e:ca:94:ae:c0:4a:5f:1b:38:4f:
                    a5:61:c2:65:9a:1a:dc:b3:d3:f7:58:d5:b8:b7:75:
                    f8:c8:ac:9a:52:ec:19:16:d6:98:84:f1:51:81:85:
                    82:c1:47:96:30:79:ca:dc:6d:a8:f2:15:66:d1:e0:
                    db:08:5e:14:63:fc:2b:c4:f4:a3:e3:5c:78:d6:c7:
                    7d:e4:c1:b2:76:b9:15:1a:b0:b7:41:2b:3c:35:2a:
                    f7:ac:81:1e:02:b6:48:30:ec:47:e6:be:56:2d:81:
                    a6:7c:0c:d5:ef:7a:b4:5e:54:2c:65:6c:f8:ef:c0:
                    60:99:35:a5:2b:3e:74:f1:4b:24:6d:5b:ed:16:b7:
                    10:20:a9:b1:34:82:c7:92:ea:55:3e:9f:2e:33:a9:
                    f7:0f:a3:f6:b0:77:d6:a9:b3:51:9b:cf:cd:c7:b0:
                    08:1f:ad:27:40:a0:a2:d7:f7:0c:6f:ce:e7:7f:4e:
                    91:dc:78:00:35:40:b4:52:e5:bd:3c:1c:5d:84:35:
                    dc:a1:62:d9:33:b5:22:d2:b0:00:74:80:74:6c:5e:
                    d8:36:42:de:ce:ee:1e:c2:0c:30:0c:2b:9b:8d:19:
                    b1:33:dd:7f:45:5a:7c:0b:17:0b:a9:4c:1f:31:62:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:23:09:04:23:E6:72:02:E6:1F:51:00:4A:31:16:07:C7:7D:2F:94
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2989C36DF3C11ED8AECBF5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.130.0/23
                IPv6:
                  2001:df2:85c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:d7:a0:35:ad:b1:fb:7e:67:ad:65:1d:cb:78:44:7b:80:
         b0:0b:6a:06:85:6b:21:d6:75:91:07:38:87:19:6e:1d:4e:99:
         a6:ef:97:fb:f3:35:11:d3:df:90:40:99:a9:66:7c:bd:d2:7a:
         aa:eb:34:95:8f:a6:15:17:9b:dd:56:d3:aa:13:63:61:43:17:
         96:e7:6a:00:64:0c:ad:26:29:2c:da:2a:e0:19:2e:d8:f0:b9:
         f7:d5:a3:b6:6e:30:09:48:03:c6:cf:d9:f4:63:83:ae:d2:26:
         9f:5e:45:61:df:d3:78:88:0d:19:1f:0f:0f:99:ec:0f:0d:76:
         bc:38:01:95:72:65:c1:81:b4:dd:e1:e1:ee:c5:da:19:2d:52:
         b5:82:69:43:9b:8f:b3:6e:41:0c:13:a7:47:94:c5:e6:6d:16:
         35:9d:a4:32:ea:d4:a7:2b:ce:1f:58:2c:18:f8:c4:44:c8:fa:
         c0:9b:cf:91:a0:c6:03:de:3a:58:e7:6c:40:24:dc:3d:4d:bd:
         fd:55:9b:d3:7a:6e:fc:9d:13:d7:ee:49:08:b2:75:8c:61:3b:
         81:95:aa:49:aa:40:f3:64:3e:ea:00:f0:ef:e8:f8:86:19:c9:
         b6:8a:48:80:86:ed:d0:ff:ff:68:50:ca:1b:36:62:d8:d8:ac:
         ed:2e:f2:13
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPR7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjUzN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU1MTEtYWFlNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMK8yoavLlDMCGscC5K67QnhMeE+ypSuwEpfGzhPpWHCZZoa3LPT91jVuLd1
+MismlLsGRbWmITxUYGFgsFHljB5ytxtqPIVZtHg2wheFGP8K8T0o+NceNbHfeTB
sna5FRqwt0ErPDUq96yBHgK2SDDsR+a+Vi2BpnwM1e96tF5ULGVs+O/AYJk1pSs+
dPFLJG1b7Ra3ECCpsTSCx5LqVT6fLjOp9w+j9rB31qmzUZvPzcewCB+tJ0Cgotf3
DG/O539Okdx4ADVAtFLlvTwcXYQ13KFi2TO1ItKwAHSAdGxe2DZC3s7uHsIMMAwr
m40ZsTPdf0VafAsXC6lMHzFiiZ0CAwEAAaOCAnEwggJtMB0GA1UdDgQWBBSpIwkE
I+ZyAuYfUQBKMRYHx30vlDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0EyOTg5QzM2
REYzQzExRUQ4QUVDQkY1Q0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAWeugjAPBAIAAjAJAwcAIAEN8oXAMA0GCSqGSIb3DQEBCwUAA4IB
AQA6/9egNa2x+35nrWUdy3hEe4CwC2oGhWsh1nWRBziHGW4dTpmm75f78zUR09+Q
QJmpZny90nqq6zSVj6YVF5vdVtOqE2NhQxeW52oAZAytJiks2irgGS7Y8Ln31aO2
bjAJSAPGz9n0Y4Ou0iafXkVh39N4iA0ZHw8PmewPDXa8OAGVcmXBgbTd4eHuxdoZ
LVK1gmlDm4+zbkEME6dHlMXmbRY1naQy6tSnK84fWCwY+MREyPrAm8+RoMYD3jpY
52xAJNw9Tb39VZvTem78nRPX7kkIsnWMYTuBlapJqkDzZD7qAPDv6PiGGcm2ikiA
hu3Q//9oUMobNmLY2KztLvIT
-----END CERTIFICATE-----
Generated at Fri Jul 10 15:13:31 2026 by rpki-client